Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
File: gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json)
Hash identifier: wpkcN28THLm/W3Akx9287YD102hpaxkbGgppsJwvyJ0=
Subject key identifier: 6E:84:D3:0A:86:40:D9:67:4B:19:76:B5:C6:62:B0:05:B3:9D:FD:44
Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d
Certificate serial: 019CAF7EEDEE5351AA311DD15CA70A622F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 17:00:56 +0000
Manifest this update: Mon 02 Mar 2026 17:00:56 +0000
Manifest next update: Tue 03 Mar 2026 17:00:56 +0000
Files and hashes: 1: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: Wzeu0SSJUMBHXbKXRjelbm6mugcWgH418j+q8WTZJbo=)
2: oE95njlQkWBSsnH1Yv9Om16L1QQ.roa (hash: 9ZO1XVhjSwITS249EhJW2diCc6ZjgTy8NQDIzTk8aNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:ed:ee:53:51:aa:31:1d:d1:5c:a7:0a:62:2f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d
Validity
Not Before: Mar 2 17:00:56 2026 GMT
Not After : Mar 3 17:00:56 2026 GMT
Subject: CN=6e84d30a8640d9674b1976b5c662b005b39dfd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:ea:79:d7:05:fc:ad:7d:87:54:4b:3b:e2:
13:83:b1:72:66:71:9b:b8:b7:53:a7:8b:f9:59:01:
6e:3a:8e:5a:44:c7:2d:7e:2c:60:33:9e:8a:f7:db:
35:f2:83:9d:df:25:fb:26:cc:b3:e2:09:7e:05:da:
98:dc:ea:c9:20:6c:de:ac:f3:ea:ba:fc:6b:28:ba:
f0:9c:fd:af:ce:fd:6b:4c:3b:d3:ae:01:88:49:21:
8f:ec:e7:9a:66:88:57:41:36:16:b7:a5:15:87:c8:
4b:cd:28:d0:33:8f:0d:aa:8e:18:4d:36:43:14:c7:
1d:8f:0d:a9:74:63:99:45:9b:f7:a4:02:c1:3a:13:
f8:82:e2:e5:41:27:e0:c0:38:94:08:c8:cf:09:f4:
a2:f1:a6:53:c8:74:ab:03:c7:47:fe:8e:80:a9:21:
13:a9:b2:e7:13:f2:de:a6:31:cd:0d:0d:e7:df:5d:
e3:68:71:dd:8e:83:7b:9a:7c:36:f9:37:b6:0b:50:
dd:e0:3c:ea:f8:06:1c:2c:ca:71:cb:5e:87:15:12:
f9:e7:1c:02:cb:17:ce:fc:04:71:22:cb:f5:9a:6a:
bc:04:9d:25:e9:a0:e8:db:50:ba:b3:6b:12:f0:e8:
c3:5a:d9:33:11:ea:0a:7f:cb:21:1d:dd:c1:42:84:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:D3:0A:86:40:D9:67:4B:19:76:B5:C6:62:B0:05:B3:9D:FD:44
X509v3 Authority Key Identifier:
keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:33:f6:d4:01:84:be:80:88:1a:76:e3:6a:84:e9:34:c1:eb:
25:4a:ad:50:ed:e0:fa:7d:3e:ae:0e:22:08:94:72:35:b5:f0:
f1:1b:f1:0f:5a:da:2d:1b:1e:76:8e:00:01:bc:12:a9:a4:06:
84:9e:fd:b2:b1:bf:dc:8a:fb:79:bc:2e:50:52:84:e0:ab:dc:
c1:98:38:14:64:09:c7:41:77:00:4c:43:b6:16:35:36:a7:d4:
56:7b:07:34:e5:1a:16:12:17:07:0d:f5:37:de:77:89:a3:fe:
d2:02:a9:fa:01:ed:5b:78:23:4e:55:05:00:cd:16:ca:a0:a9:
e7:39:ee:c4:0b:e6:9f:05:bb:04:36:b1:48:ab:a0:35:66:53:
a1:46:ac:6c:7b:c4:ff:84:97:69:d3:02:17:10:45:78:0c:1e:
dd:e4:cf:9a:15:60:c0:af:c5:4c:46:40:df:9a:5b:b4:33:73:
c6:06:80:58:86:7e:59:5c:ae:93:d7:56:f9:3f:55:0c:7e:a3:
62:b2:31:a4:13:69:fb:bc:2c:1e:45:24:c7:e7:b9:8a:b2:cc:
78:69:cb:48:b3:4a:cd:5b:29:4b:fa:e3:2f:22:0b:73:3e:7c:
60:62:2e:e6:91:5b:d6:ba:28:8b:37:68:8e:c4:7c:0e:bd:b3:
c5:b1:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:21 2026 by rpki-client